CVE-2020-27015

Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:trendmicro:antivirus:2020:*:*:*:*:macos:*:*

History

21 Nov 2024, 05:20

Type Values Removed Values Added
References () https://helpcenter.trendmicro.com/en-us/article/TMKA-09975 - Vendor Advisory () https://helpcenter.trendmicro.com/en-us/article/TMKA-09975 - Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-20-1286/ - Third Party Advisory, VDB Entry () https://www.zerodayinitiative.com/advisories/ZDI-20-1286/ - Third Party Advisory, VDB Entry

Information

Published : 2020-10-30 00:15

Updated : 2024-11-21 05:20


NVD link : CVE-2020-27015

Mitre link : CVE-2020-27015

CVE.ORG link : CVE-2020-27015


JSON object : View

Products Affected

trendmicro

  • antivirus
CWE
CWE-209

Generation of Error Message Containing Sensitive Information